b47bf41986964ec1f181f023eacc2c10eed2ad556f64d402bec61b39e60aae69 | Triage

Analysis

max time kernel
42s
max time network
45s
platform
windows7_x64
resource
win7-20220812-en
resource tags

arch:x64arch:x86image:win7-20220812-enlocale:en-usos:windows7-x64system
submitted
14-09-2022 14:46

Sharing

Report Analysis Logs

General

Target

about/yourWay.js
Size

208B
MD5

af846a60602a389b008dfa8d584daff7
SHA1

68217022f4b7bc88b913d7eae5bcebd11eef0ae2
SHA256

13b4e28dc14b82e7201f198fc99d400a3cfbc6d21a2cdeba73e3a3772922ad56
SHA512

7c5f87f9d1ac08bbd0dfa6ef2675192dbfe06236c753c0fe0b11c03ac177d4e7d18da263c03c4040d3251e9b01f50edb4b1325f9b54c9cf4c50a1de4771c66d2

Score

3^/10

Malware Config

Signatures

Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s). Likely ransomware behaviour.

System Information Discovery
T1082

C:\Windows\system32\wscript.exe
wscript.exe C:\Users\Admin\AppData\Local\Temp\about\yourWay.js
1⤵
PID:864

Network

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

memory/864-54-0x000007FEFBD01000-0x000007FEFBD03000-memory.dmp

Filesize
8KB

Download